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Abstract 



PURPOSETo cope with an infringement of security that a wrong intruder from one system wrongfully 
accesses another system in open systems. 

CONSTITUTIONS least one or more security audit server (SO) is provided in open distributed network 
systems (SS1, SS2, SS3...) and this SO always extracts and analyzes security messages (M1, etc.) 
which are transmitted from work stations (WS1 1 , etc.) connected to networks and are related to the 
infringement of security and collects and accumulates the results. In the case of the message which may 
have an influence upon systems, a security report related to this message is generated. All security 
reports are synthetically analyzed to diagnose the weak points of systems, and the proper change of the 
security policy is requested to actual systems. 
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